5.5
CVSSv3

CVE-2019-14250

Published: 24/07/2019 Updated: 01/03/2023
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

An issue exists in GNU libiberty, as distributed in GNU Binutils 2.32. simple_object_elf_match in simple-object-elf.c does not check for a zero shstrndx value, leading to an integer overflow and resultant heap-based buffer overflow.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

gnu binutils 2.32

canonical ubuntu linux 18.04

canonical ubuntu linux 16.04

opensuse leap 15.0

opensuse leap 15.1

opensuse leap 15.2

Vendor Advisories

Several security issues were fixed in libiberty ...
Several security issues were fixed in GNU binutils ...
Impact: Moderate Public Date: 2019-08-09 CWE: CWE-190 Bugzilla: 1739490: CVE-2019-14250 binutils: integ ...